$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/01b1e3c2-0245-3e89-ba0b-3cb1e6f56235.roa File: 01b1e3c2-0245-3e89-ba0b-3cb1e6f56235.roa (raw, json) Hash identifier: OC2XvjxKp3hjU0pV7DrrvNoPJv1pTISL3cDemY4kjtM= Subject key identifier: D2:9D:A6:A6:6C:EA:8E:08:7B:41:E1:0A:B6:75:6A:91:F2:5D:32:A7 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584F119CF4BC6C009393C40FDA40 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/01b1e3c2-0245-3e89-ba0b-3cb1e6f56235.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 3356 IP address blocks: 8.29.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:f4:bc:6c:00:93:93:c4:0f:da:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=d2741ae6-92e8-4591-a785-b3a735fd8d25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4b:d5:e0:88:c2:87:51:f7:b9:b6:9e:31:9b: a1:ac:20:91:63:2b:57:c7:9f:3d:ae:63:b1:fd:04: 9c:b6:36:55:f5:e3:30:9e:41:33:79:09:32:e8:d8: c9:57:85:93:ff:c7:4f:09:27:8a:25:59:c6:a4:cd: 3d:3c:15:00:fc:04:cd:6b:d9:5a:ed:1e:69:41:21: ed:e5:5e:db:71:80:4d:93:d2:ff:b3:eb:27:5b:a6: 12:e7:9b:39:19:83:99:2c:50:a2:e4:44:e0:00:c4: 82:33:02:94:ca:de:c5:36:90:f6:fa:b4:60:b7:25: c3:f5:1c:37:c7:7f:41:20:72:6b:b1:ec:9f:f0:e3: a3:3f:43:68:ad:29:53:7e:a3:7a:a0:44:f0:f7:56: e7:77:3b:08:2f:26:93:c2:09:ca:fe:7a:a0:5a:8e: 8f:69:a8:1a:2a:65:29:b7:a9:74:ac:69:1b:9a:cc: 92:72:e2:c9:c3:b1:70:42:3c:9d:7a:13:f2:53:79: c0:02:c0:53:59:80:b1:d6:3f:3e:e8:ae:a9:14:fc: 72:ed:3f:68:f7:0b:ad:14:ff:d1:15:fd:52:c6:a3: 8f:76:75:b2:82:c0:a2:3b:2c:43:a0:b3:a5:41:dc: 35:d2:d1:d4:de:d4:75:b8:2e:64:ef:05:0d:62:4d: 0a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:9D:A6:A6:6C:EA:8E:08:7B:41:E1:0A:B6:75:6A:91:F2:5D:32:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/01b1e3c2-0245-3e89-ba0b-3cb1e6f56235.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.29.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:71:48:25:7e:d4:50:8b:83:0d:ef:4d:c5:56:2d:59:7f:dd: 7d:6f:ec:86:2f:45:77:94:8b:f6:f0:b4:c9:d9:11:a6:61:48: 6d:b3:c6:30:5b:3d:13:a2:5d:ae:14:94:a4:67:16:d9:9b:34: ad:82:67:e5:37:38:23:c7:3c:bb:f0:43:34:d7:9f:f5:0d:d7: c2:66:2b:a0:d1:08:be:c5:fe:7e:6e:42:67:11:83:0d:0c:12: a0:77:37:91:03:3a:94:82:f2:c4:2b:34:33:41:47:26:bf:39: 92:96:86:6b:34:b1:ab:55:3b:b4:07:95:c1:38:7e:19:c0:a2: 33:1d:98:ed:dd:90:bb:cd:ea:02:de:90:a6:ab:b8:54:2d:4a: ab:e8:5e:9b:fc:e4:a6:c2:c3:f7:42:f0:2c:d7:81:17:9a:86: 12:45:b4:5d:b5:7d:59:80:ce:15:a5:93:a2:78:80:55:83:5f: 1d:45:1e:d1:03:71:c3:5b:6c:3c:45:ee:ce:23:86:94:dc:11: 29:bf:5f:42:9c:4e:19:56:57:01:51:e0:ab:7b:02:e4:00:e4: 29:f7:9a:e9:dc:e1:4c:3a:56:32:0e:63:69:63:14:16:7d:51: 1d:7c:fb:7d:e7:20:64:bb:31:06:fd:0e:df:93:10:da:6f:fa: 4b:12:ff:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnPS8bACTk8QP2kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDI3NDFhZTYtOTJlOC00NTkxLWE3ODUtYjNhNzM1ZmQ4ZDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEvV4IjCh1H3ubaeMZuhrCCRYytXx589rmOx /QSctjZV9eMwnkEzeQky6NjJV4WT/8dPCSeKJVnGpM09PBUA/ATNa9la7R5pQSHt 5V7bcYBNk9L/s+snW6YS55s5GYOZLFCi5ETgAMSCMwKUyt7FNpD2+rRgtyXD9Rw3 x39BIHJrseyf8OOjP0NorSlTfqN6oETw91bndzsILyaTwgnK/nqgWo6PaagaKmUp t6l0rGkbmsyScuLJw7FwQjydehPyU3nAAsBTWYCx1j8+6K6pFPxy7T9o9wutFP/R Ff1SxqOPdnWygsCiOyxDoLOlQdw10tHU3tR1uC5k7wUNYk0KdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNKdpqZs6o4Ie0HhCrZ1apHyXTKnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMDFiMWUzYzItMDI0NS0z ZTg5LWJhMGItM2NiMWU2ZjU2MjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQECB0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFxSCV+1FCLgw3vTcVWLVl/3X1v7IYvRXeUi/bwtMnZEaZhSG2zxjBb PROiXa4UlKRnFtmbNK2CZ+U3OCPHPLvwQzTXn/UN18JmK6DRCL7F/n5uQmcRgw0M EqB3N5EDOpSC8sQrNDNBRya/OZKWhms0satVO7QHlcE4fhnAojMdmO3dkLvN6gLe kKaruFQtSqvoXpv85KbCw/dC8CzXgReahhJFtF21fVmAzhWlk6J4gFWDXx1FHtED ccNbbDxF7s4jhpTcESm/X0KcThlWVwFR4Kt7AuQA5Cn3munc4Uw6VjIOY2ljFBZ9 UR18+33nIGS7MQb9Dt+TENpv+ksS/4s= -----END CERTIFICATE-----Generated at Sun Sep 20 15:05:40 2026 by rpki-client